Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: h8UxGZ8GZCxFX1lIs9aztY+7ZzFiqK/kvHDJ2xon2Ss=
Subject key identifier: 16:F6:30:D8:DC:EF:91:B6:61:46:09:86:EE:95:EC:C8:59:F8:F8:57
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 0909C5C6ED58CE30ED8BBB8A2F992307AB6C7102
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 07 Dec 2024 11:13:26 +0000
ROA not before: Sat 07 Dec 2024 11:08:26 +0000
ROA not after: Sat 06 Dec 2025 11:13:26 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:5::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:09:c5:c6:ed:58:ce:30:ed:8b:bb:8a:2f:99:23:07:ab:6c:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 11:08:26 2024 GMT
Not After : Dec 6 11:13:26 2025 GMT
Subject: CN=16F630D8DCEF91B661460986EE95ECC859F8F857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:c0:db:a1:6f:cf:11:ef:fc:21:b1:fb:7a:
f9:1e:2c:93:3d:ff:4b:04:a3:af:9f:09:36:65:ba:
6e:2f:58:21:df:76:23:12:24:fd:1f:98:68:2c:bb:
02:70:ff:b0:e0:0c:58:34:05:3a:31:b0:1e:39:c2:
e7:fe:0a:8e:f3:ab:6d:85:e9:91:a4:c4:ea:33:93:
76:05:34:e5:1f:2c:8f:b1:2a:1f:b6:27:86:38:ba:
3c:53:e7:ee:10:da:95:ac:27:04:96:1e:e7:17:c6:
f0:2f:39:96:95:8d:7b:0a:f9:a7:93:38:60:90:5e:
c4:90:bc:a7:f5:7e:22:9b:6c:ec:dc:b7:c7:28:2d:
d7:3e:37:7e:ce:dc:5d:8d:fa:2a:7d:fb:fe:88:fb:
2c:1f:c5:0b:9e:45:1f:8e:4a:af:4f:91:c5:5d:28:
c6:5a:96:c8:51:11:94:7f:99:05:f5:c4:a2:16:56:
53:dc:fd:a7:b7:18:95:c6:a9:d5:42:31:fc:cd:97:
1f:72:a2:1b:61:de:64:b3:18:ff:e7:40:0b:ae:09:
86:fd:a6:32:e4:90:8e:b9:a7:b7:8e:a4:08:8b:8b:
45:76:da:76:fc:25:e5:e8:21:d8:3b:96:5c:f0:26:
55:1c:a7:b2:f6:02:d4:27:83:8b:c0:da:76:0e:b0:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:30:D8:DC:EF:91:B6:61:46:09:86:EE:95:EC:C8:59:F8:F8:57
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:5::/64
Signature Algorithm: sha256WithRSAEncryption
b1:c1:ae:cd:d8:40:c2:e0:fd:ca:f0:26:ae:27:6c:49:52:98:
0e:8a:a6:7c:2c:6a:9f:c7:2a:10:15:10:84:97:13:da:a7:99:
f6:56:62:9c:5e:3f:8f:e8:d2:e2:cc:2c:ca:ca:ae:c9:6c:52:
84:0f:46:0a:ed:16:73:49:e5:aa:a0:cb:12:8e:9b:22:9c:04:
0f:a6:1e:ee:ce:70:52:c2:0f:10:2d:2d:24:f7:1d:cf:20:54:
80:92:e2:93:82:b0:d1:ad:c2:a0:09:52:85:b9:e3:21:c3:ed:
a8:1f:a5:38:c7:99:0e:28:76:19:8f:23:ce:0d:58:5a:f4:7e:
40:9a:14:5f:af:56:d4:d5:8d:f6:e8:3a:c1:00:d6:5a:00:78:
b3:11:02:e8:51:dc:49:3f:7f:19:cc:3b:e4:3c:44:47:a1:4f:
8e:e8:8b:5d:b4:c8:85:07:d4:52:5f:0c:9d:2e:19:d7:a4:3c:
0d:bd:4d:b9:b0:6f:a0:fb:43:bd:07:99:67:7a:b4:d7:8e:3c:
0d:c4:59:82:71:df:ba:f6:be:58:84:b2:79:e1:25:8d:4b:27:
b9:89:49:77:43:ff:f8:ba:2f:65:c2:fc:45:cd:58:93:1b:2d:
b2:d5:26:2f:ad:87:cd:c1:1a:99:ad:56:47:c9:85:ce:08:6e:
3e:50:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:35:01 2025 by rpki-client